This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
File:                     YOLI9184WstLlKaNiZNRujR6MyM.mft (raw, json)
Hash identifier:          Y6JibvF6I4w5hvnybBm+X0KzobUVGb2kORFyB8KTiHQ=
Subject key identifier:   E3:DA:76:EA:29:B1:C9:F3:F7:73:90:CD:27:9A:71:82:39:02:36:B5
Authority key identifier: 60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23
Certificate issuer:       /CN=60e2c8f75f385acb4b94a68d899351ba347a3323
Certificate serial:       019C43227E6EDAD2F1863F26BF360C81F1A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
Manifest number:          171F
Signing time:             Mon 09 Feb 2026 16:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:59 +0000
Files and hashes:         1: YOLI9184WstLlKaNiZNRujR6MyM.crl (hash: DSMDoRjOSU3ivJQ5iOTUMDQEjvajA7XBGLXnJXxTFFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:7e:6e:da:d2:f1:86:3f:26:bf:36:0c:81:f1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e2c8f75f385acb4b94a68d899351ba347a3323
        Validity
            Not Before: Feb  9 16:00:59 2026 GMT
            Not After : Feb 10 16:00:59 2026 GMT
        Subject: CN=e3da76ea29b1c9f3f77390cd279a7182390236b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:bf:76:5b:db:89:d9:3a:8c:e4:5d:6f:1e:
                    cb:fe:d1:8c:d3:61:35:01:25:47:14:60:96:fe:d6:
                    ef:42:c6:88:7e:22:89:f0:b6:42:67:c2:7c:d9:ad:
                    3d:f2:54:f6:d5:91:4c:a1:50:72:9a:a2:85:0a:bd:
                    85:5a:bf:97:4b:9a:6f:b1:b2:a7:aa:9c:e3:5e:43:
                    80:2a:af:7c:98:46:75:87:62:de:24:34:a5:78:a8:
                    21:0a:32:e9:7a:60:83:33:72:78:4e:93:33:f8:27:
                    f3:7f:e2:b1:19:63:0e:79:e8:88:de:c2:ba:48:e6:
                    a4:59:0c:30:63:b3:d9:22:a1:a1:51:45:64:04:57:
                    87:25:11:ef:e2:1c:92:e2:30:3c:59:cd:b0:ad:04:
                    fd:85:04:9f:f3:5a:ef:b0:66:40:da:44:40:b5:82:
                    bf:f6:2a:ca:63:48:33:ce:02:fd:bf:5b:1e:cc:27:
                    48:9b:96:99:cf:67:13:4d:65:fa:ce:ca:5a:80:8a:
                    35:15:54:7b:df:39:f6:22:61:57:57:32:22:90:48:
                    38:42:57:76:7d:23:61:e7:b4:eb:c4:d6:6d:0d:6e:
                    7e:39:37:93:51:9c:69:2e:ec:2e:e8:e2:43:82:db:
                    72:66:de:4c:7c:10:2d:ff:6e:87:b7:31:07:c7:a0:
                    a3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:76:EA:29:B1:C9:F3:F7:73:90:CD:27:9A:71:82:39:02:36:B5
            X509v3 Authority Key Identifier:
                keyid:60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:94:80:a8:8e:4e:0a:13:50:42:af:67:4e:61:51:79:62:
         b4:75:8e:9f:e6:77:df:ee:97:2f:26:bf:ba:98:5c:c4:47:52:
         12:63:46:e7:8b:4f:56:73:6b:2b:4a:46:87:b9:5d:97:d0:9b:
         4d:18:e5:12:ad:34:f3:8b:87:bf:5c:63:91:41:1c:8e:72:d3:
         3a:be:ba:2e:86:f9:db:96:4b:98:80:4e:3d:da:96:f2:01:f7:
         41:51:1a:f5:93:8a:6d:20:65:38:fb:9a:de:77:0b:4b:0a:0b:
         ab:26:82:4e:27:9b:68:98:c2:e7:86:5a:9f:f0:e9:10:13:f4:
         ac:53:b8:56:bb:b6:cd:a5:fd:73:f5:02:76:82:56:74:a7:c4:
         00:c6:f5:36:f0:51:8a:ed:e0:17:8c:30:1b:3e:38:4d:c8:f3:
         eb:87:f3:25:00:d7:db:da:be:24:80:9f:8f:14:31:6a:69:8b:
         9f:be:41:49:1e:92:78:b0:b3:14:3c:ae:a1:b3:82:46:a3:20:
         60:3d:58:5c:2d:b2:40:85:86:b8:56:cf:40:8f:12:27:13:24:
         37:e0:55:40:73:6c:f3:80:c1:79:0a:8f:6d:a2:61:1d:12:86:
         0e:c0:b3:04:fb:95:97:aa:d8:4a:cf:b2:32:de:d3:ed:36:b5:
         f7:3c:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:36 2026 by rpki-client